Dear Mr. Morten Brekkevold,

Yes I can see its negative indexes. and I'm not see the negative indexes on ZTE GPON Ports.

If there a way to get around this negative indexes? because we have hundred Huawei OLT GPON devices that we need to add those so we can replace our Cacti NMS.

Thank You for your attention.

Agungreza

NCSIRT DIVISION

PT MORA TELEMATIKA INDONESIA

Grha 9, Jalan Panataran No.9 Proklamasi Jakarta Pusat 10320, Indonesia

Office : +62-21 31998600 | Fax : +62-21 3142882 |

Email: ncsirt@moratelindo.co.id

-----Original Message----- From: Morten Brekkevold morten.brekkevold@uninett.no Sent: 27 February 2020 15:36 To: Agung Reza Satria agung.reza@moratelindo.co.id Cc: nav-users@uninett.no Subject: Re: GPON port didn't shows up

On Thu, 27 Feb 2020 15:08:36 +0700 "Agung Reza Satria" < mailto:agung.reza@moratelindo.co.id agung.reza@moratelindo.co.id> wrote:

Thank you for build NAV, it is a good tools to have. But I have a

missing things. I have several devices that monitor by NAV and

something weird happen that NAV cannot shows up GPON Port. It only

show ethernet ports and vlans. Here is my comparation with other NMS

(cacti).

Hi there,

It seems your Cacti lists all the GPON ports as having *negative* ifIndex values. An InterfaceIndex is defined by IF-MIB as "A unique value, *greater than zero*, for each interface or interface sub-layer in the managed system." (emphasis added by me).

I.e. these cannot be true ifIndexes, which leads me to believe these ports may have been collected from some proprietary Huawei MIB, which Cacti may have support for. Is this something you can confirm?

--

sincerely,

Morten Brekkevold

Uninett

============================================================================================== CONFIDENTIALITY NOTE: This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not review, disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and destroy all copies of this information from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late, incomplete or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. PT. Mora Telematika Indonesia, Grha 9, Jl. Penataran No 9, Jakarta 10320, Indonesia, www.moratelindo.co.id ============================================================================================== SAVE PAPER - Please do not print this e-mail unless necessary

Dear Mr. Morten,

I have tried it and here is the result that I found for negative index value on Huawei GPON:

Executing SNMP get for num of indexes @ '.1.3.6.1.2.1.2.1.0' Index Count: 121

+ Executing SNMP walk for list of indexes @ '.1.3.6.1.2.1.2.2.1.1' Index Count: 121

+ Index found at OID: 'ifIndex.128' value: '128'

+ Index found at OID: 'ifIndex.262' value: '262'

+ Index found at OID: 'ifIndex.263' value: '263'

+ Index found at OID: 'ifIndex.264' value: '264'

+ Index found at OID: 'ifIndex.265' value: '265'

+ Index found at OID: 'ifIndex.266' value: '266'

+ Index found at OID: 'ifIndex.267' value: '267'

+ Index found at OID: 'ifIndex.268' value: '268'

+ Index found at OID: 'ifIndex.270' value: '270'

+ Index found at OID: 'ifIndex.271' value: '271'

+ Index found at OID: 'ifIndex.272' value: '272'

+ Index found at OID: 'ifIndex.273' value: '273'

+ Index found at OID: 'ifIndex.274' value: '274'

+ Index found at OID: 'ifIndex.234930176' value: '234930176'

+ Index found at OID: 'ifIndex.234930240' value: '234930240'

+ Index found at OID: 'ifIndex.234930304' value: '234930304'

+ Index found at OID: 'ifIndex.234930368' value: '234930368'

+ Index found at OID: 'ifIndex.234938368' value: '234938368'

+ Index found at OID: 'ifIndex.234938432' value: '234938432'

+ Index found at OID: 'ifIndex.234938496' value: '234938496'

+ Index found at OID: 'ifIndex.234938560' value: '234938560'

+ Index found at OID: 'ifIndex.234946560' value: '234946560'

+ Index found at OID: 'ifIndex.234946624' value: '234946624'

+ Index found at OID: 'ifIndex.234954752' value: '234954752'

+ Index found at OID: 'ifIndex.234954816' value: '234954816'

+ Index found at OID: 'ifIndex.4194304000' value: '-100663296'

+ Index found at OID: 'ifIndex.4194304256' value: '-100663040'

+ Index found at OID: 'ifIndex.4194304512' value: '-100662784'

+ Index found at OID: 'ifIndex.4194304768' value: '-100662528'

+ Index found at OID: 'ifIndex.4194305024' value: '-100662272'

+ Index found at OID: 'ifIndex.4194305280' value: '-100662016'

+ Index found at OID: 'ifIndex.4194305536' value: '-100661760'

+ Index found at OID: 'ifIndex.4194305792' value: '-100661504'

+ Index found at OID: 'ifIndex.4194306048' value: '-100661248'

+ Index found at OID: 'ifIndex.4194306304' value: '-100660992'

+ Index found at OID: 'ifIndex.4194306560' value: '-100660736'

+ Index found at OID: 'ifIndex.4194306816' value: '-100660480'

+ Index found at OID: 'ifIndex.4194307072' value: '-100660224'

+ Index found at OID: 'ifIndex.4194307328' value: '-100659968'

+ Index found at OID: 'ifIndex.4194307584' value: '-100659712'

+ Index found at OID: 'ifIndex.4194307840' value: '-100659456'

+ Index found at OID: 'ifIndex.4194312192' value: '-100655104'

+ Index found at OID: 'ifIndex.4194312448' value: '-100654848'

+ Index found at OID: 'ifIndex.4194312704' value: '-100654592'

+ Index found at OID: 'ifIndex.4194312960' value: '-100654336'

+ Index found at OID: 'ifIndex.4194313216' value: '-100654080'

+ Index found at OID: 'ifIndex.4194313472' value: '-100653824'

+ Index found at OID: 'ifIndex.4194313728' value: '-100653568'

+ Index found at OID: 'ifIndex.4194313984' value: '-100653312'

+ Index found at OID: 'ifIndex.4194314240' value: '-100653056'

+ Index found at OID: 'ifIndex.4194314496' value: '-100652800'

+ Index found at OID: 'ifIndex.4194314752' value: '-100652544'

+ Index found at OID: 'ifIndex.4194315008' value: '-100652288'

+ Index found at OID: 'ifIndex.4194315264' value: '-100652032'

+ Index found at OID: 'ifIndex.4194315520' value: '-100651776'

+ Index found at OID: 'ifIndex.4194315776' value: '-100651520'

+ Index found at OID: 'ifIndex.4194316032' value: '-100651264'

+ Index found at OID: 'ifIndex.4194320384' value: '-100646912'

+ Index found at OID: 'ifIndex.4194320640' value: '-100646656'

+ Index found at OID: 'ifIndex.4194320896' value: '-100646400'

+ Index found at OID: 'ifIndex.4194321152' value: '-100646144'

+ Index found at OID: 'ifIndex.4194321408' value: '-100645888'

+ Index found at OID: 'ifIndex.4194321664' value: '-100645632'

+ Index found at OID: 'ifIndex.4194321920' value: '-100645376'

+ Index found at OID: 'ifIndex.4194322176' value: '-100645120'

+ Index found at OID: 'ifIndex.4194322432' value: '-100644864'

+ Index found at OID: 'ifIndex.4194322688' value: '-100644608'

+ Index found at OID: 'ifIndex.4194322944' value: '-100644352'

+ Index found at OID: 'ifIndex.4194323200' value: '-100644096'

+ Index found at OID: 'ifIndex.4194323456' value: '-100643840'

+ Index found at OID: 'ifIndex.4194323712' value: '-100643584'

+ Index found at OID: 'ifIndex.4194323968' value: '-100643328'

+ Index found at OID: 'ifIndex.4194324224' value: '-100643072'

+ Index found at OID: 'ifIndex.4194328576' value: '-100638720'

+ Index found at OID: 'ifIndex.4194328832' value: '-100638464'

+ Index found at OID: 'ifIndex.4194329088' value: '-100638208'

+ Index found at OID: 'ifIndex.4194329344' value: '-100637952'

+ Index found at OID: 'ifIndex.4194329600' value: '-100637696'

+ Index found at OID: 'ifIndex.4194329856' value: '-100637440'

+ Index found at OID: 'ifIndex.4194330112' value: '-100637184'

+ Index found at OID: 'ifIndex.4194330368' value: '-100636928'

+ Index found at OID: 'ifIndex.4194330624' value: '-100636672'

+ Index found at OID: 'ifIndex.4194330880' value: '-100636416'

+ Index found at OID: 'ifIndex.4194331136' value: '-100636160'

+ Index found at OID: 'ifIndex.4194331392' value: '-100635904'

+ Index found at OID: 'ifIndex.4194331648' value: '-100635648'

+ Index found at OID: 'ifIndex.4194331904' value: '-100635392'

+ Index found at OID: 'ifIndex.4194332160' value: '-100635136'

+ Index found at OID: 'ifIndex.4194332416' value: '-100634880'

+ Index found at OID: 'ifIndex.4194336768' value: '-100630528'

+ Index found at OID: 'ifIndex.4194337024' value: '-100630272'

+ Index found at OID: 'ifIndex.4194337280' value: '-100630016'

+ Index found at OID: 'ifIndex.4194337536' value: '-100629760'

+ Index found at OID: 'ifIndex.4194337792' value: '-100629504'

+ Index found at OID: 'ifIndex.4194338048' value: '-100629248'

+ Index found at OID: 'ifIndex.4194338304' value: '-100628992'

+ Index found at OID: 'ifIndex.4194338560' value: '-100628736'

+ Index found at OID: 'ifIndex.4194338816' value: '-100628480'

+ Index found at OID: 'ifIndex.4194339072' value: '-100628224'

+ Index found at OID: 'ifIndex.4194339328' value: '-100627968'

+ Index found at OID: 'ifIndex.4194339584' value: '-100627712'

+ Index found at OID: 'ifIndex.4194339840' value: '-100627456'

+ Index found at OID: 'ifIndex.4194340096' value: '-100627200'

+ Index found at OID: 'ifIndex.4194340352' value: '-100626944'

+ Index found at OID: 'ifIndex.4194340608' value: '-100626688'

+ Index found at OID: 'ifIndex.4194344960' value: '-100622336'

+ Index found at OID: 'ifIndex.4194345216' value: '-100622080'

+ Index found at OID: 'ifIndex.4194345472' value: '-100621824'

+ Index found at OID: 'ifIndex.4194345728' value: '-100621568'

+ Index found at OID: 'ifIndex.4194345984' value: '-100621312'

+ Index found at OID: 'ifIndex.4194346240' value: '-100621056'

+ Index found at OID: 'ifIndex.4194346496' value: '-100620800'

+ Index found at OID: 'ifIndex.4194346752' value: '-100620544'

+ Index found at OID: 'ifIndex.4194347008' value: '-100620288'

+ Index found at OID: 'ifIndex.4194347264' value: '-100620032'

+ Index found at OID: 'ifIndex.4194347520' value: '-100619776'

+ Index found at OID: 'ifIndex.4194347776' value: '-100619520'

+ Index found at OID: 'ifIndex.4194348032' value: '-100619264'

+ Index found at OID: 'ifIndex.4194348288' value: '-100619008'

+ Index found at OID: 'ifIndex.4194348544' value: '-100618752'

+ Index found at OID: 'ifIndex.4194348800' value: '-100618496'

More SNMPwalk details I attached on file. I hope its more informative

BR

Agungreza

NCSIRT DIVISION

PT MORA TELEMATIKA INDONESIA

Grha 9, Jalan Panataran No.9 Proklamasi Jakarta Pusat 10320, Indonesia

Office : +62-21 31998600 | Fax : +62-21 3142882 |

Email: ncsirt@moratelindo.co.id

-----Original Message----- From: Morten Brekkevold morten.brekkevold@uninett.no Sent: 03 March 2020 18:55 To: Agung Reza Satria agung.reza@moratelindo.co.id Cc: nav-users@uninett.no Subject: Re: GPON port didn't shows up

On Thu, 27 Feb 2020 16:04:07 +0700 "Agung Reza Satria" < mailto:agung.reza@moratelindo.co.id agung.reza@moratelindo.co.id> wrote:

Yes I can see its negative indexes. and I'm not see the negative

indexes on ZTE GPON Ports.

If there a way to get around this negative indexes? because we have

hundred Huawei OLT GPON devices that we need to add those so we can

replace our Cacti NMS.

You still have not been able to confirm whether the GPON ports are actually reported with negative ifIndex values in the IF-MIB, or whether Cacti uses some proprietary MIB to fetch these interfaces from your Huawei devices.

There isn't much I can do or speculate on without such confirmation.

Are you able to use NET-SNMP command line utilities to query your Huawei devices? For example:

snmpwalk -v2c -c COMMUNITY IP-ADDRESS IF-MIB::ifDescr

--

sincerely,

Morten Brekkevold

Uninett

Dear Mr. Morten,

Is it possible to ignore this negative ifIndex values and focusing on ifIndex, IfDescription, IfName, IfAlias, , IfSpeed, IfHighSpeed, IfHwAddr, and IfIP ?

I tried using PRTG and LibreNMS, both are able to show all GPON Ports on Huawei OLTs like cacti does.

Agungreza NCSIRT DIVISION

PT MORA TELEMATIKA INDONESIA Grha 9, Jalan Panataran No.9 Proklamasi Jakarta Pusat 10320, Indonesia Office : +62-21 31998600 | Fax : +62-21 3142882 | Email: ncsirt@moratelindo.co.id

-----Original Message----- From: Morten Brekkevold morten.brekkevold@uninett.no Sent: 04 March 2020 21:47 To: Agung Reza Satria agung.reza@moratelindo.co.id Cc: nav-users@uninett.no Subject: Re: GPON port didn't shows up

On Wed, 4 Mar 2020 08:46:36 +0700 "Agung Reza Satria" agung.reza@moratelindo.co.id wrote:

I have tried it and here is the result that I found for negative index value on Huawei GPON:

[snip]

• Index found at OID: 'ifIndex.4194304000' value: '-100663296'
• Index found at OID: 'ifIndex.4194304256' value: '-100663040'
• Index found at OID: 'ifIndex.4194304512' value: '-100662784'

This is a problem with the SNMP implementation on your Huawei device. I can't say for sure this is the exact problem that causes NAV to ignore the ports, but it certainly causes a problem for the SNMP library on your computer, and for Cacti, it appears.

The spec for ifIndex says:

| IF-MIB::ifIndex | ifIndex OBJECT-TYPE | -- FROM IF-MIB, RFC1213-MIB, RFC1158-MIB | -- TEXTUAL CONVENTION InterfaceIndex | SYNTAX Integer32 (1..2147483647) | DISPLAY-HINT "d" | MAX-ACCESS read-only | STATUS current | DESCRIPTION "A unique value, greater than zero, for each interface. It | is recommended that values are assigned contiguously | starting from 1. The value for each interface sub-layer | must remain constant at least from one re-initialization of | the entity's network management system to the next re- | initialization." | ::= { iso(1) org(3) dod(6) internet(1) mgmt(2) mib-2(1) interfaces(2) | ifTable(2) ifEntry(1) 1 }

Note the SYNTAX clause: Integer32 (1..2147483647). Your Huawei device seems to use ifIndex values that are out of bounds, according to the spec. It seems your SNMP library tries to interpret an ifIndex number as a signed integer, which causes the resulting value to wrap around and become a negative number, e.g. (using Python):

...

...

import struct struct.unpack("i", struct.pack("I", 4194304000))

(-100663296,)

This may wreac havoc in code trying to correlate information from different MIB objects. In one object, it might find the literal value 4194304000, which it then is unable to correlate to the value -100663296, which it "got" from the IF-MIB.

It sounds to me like Huawei's implementation is broken and needs to be fixed, and that you may have just been lucky that Cacti coincidentally works for you. You cannot be guaranteed that any other SNMP-based NMS that follows the spec will actually work properly with these devices.

To figure out what actually happens inside NAV when it talks to your Huawei devices, you would need to switch on debug logging in parts of ipdevpoll. However, if the problem occurs within the low-level SNMP library, I cannot promise you a workaround in NAV at all. You should really report a bug with Huawei, IMNSHO.

-- sincerely, Morten Brekkevold Uninett

Dear Mr. Morten Brekkevold,

We only want to get alarm/alert from Huawei GPON devices using NAV, is it possible to allow this negative ifIndex value or is it other way?

Regards, Agungreza NCSIRT DIVISION

PT MORA TELEMATIKA INDONESIA Grha 9, Jalan Panataran No.9 Proklamasi Jakarta Pusat 10320, Indonesia Office : +62-21 31998600 | Fax : +62-21 3142882 | Email: ncsirt@moratelindo.co.id

-----Original Message----- From: Morten Brekkevold morten.brekkevold@uninett.no Sent: 27 February 2020 15:36 To: Agung Reza Satria agung.reza@moratelindo.co.id Cc: nav-users@uninett.no Subject: Re: GPON port didn't shows up

On Thu, 27 Feb 2020 15:08:36 +0700 "Agung Reza Satria" agung.reza@moratelindo.co.id wrote:

Thank you for build NAV, it is a good tools to have. But I have a missing things. I have several devices that monitor by NAV and something weird happen that NAV cannot shows up GPON Port. It only show ethernet ports and vlans. Here is my comparation with other NMS

(cacti).

Hi there,

It seems your Cacti lists all the GPON ports as having *negative* ifIndex values. An InterfaceIndex is defined by IF-MIB as "A unique value, *greater than zero*, for each interface or interface sub-layer in the managed system." (emphasis added by me).

I.e. these cannot be true ifIndexes, which leads me to believe these ports may have been collected from some proprietary Huawei MIB, which Cacti may have support for. Is this something you can confirm?

-- sincerely, Morten Brekkevold Uninett

============================================================================================== CONFIDENTIALITY NOTE: This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not review, disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and destroy all copies of this information from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late, incomplete or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. PT. Mora Telematika Indonesia, Grha 9, Jl. Penataran No 9, Jakarta 10320, Indonesia, www.moratelindo.co.id ============================================================================================== SAVE PAPER - Please do not print this e-mail unless necessary